testing-bfmtv-edito.cleo.media
Issued by Amazon
About this certificate
This digital certificate with serial number 0b:7f:08:5c:e6:af:05:14:3a:a7:e9:59:49:2f:c8:52 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=testing-bfmtv-edito.cleo.media
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:7f:08:5c:e6:af:05:14:3a:a7:e9:59:49:2f:c8:52Serial Number (int): 15281099274328916498783525960638515282
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a8:b6:ba:68:bd:dc:63:55:4b:1d:5e:8d:65:56:aa:b3:e4:4a:a2:a2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): bc:1e:da:38:d8:d9:8d:1a:b0:f9:f8:53:29:13:07:54:bd:a9:fb:0c
Fingerprint (sha256): 10:29:26:0d:a2:be:ce:70:f7:51:ec:84:91:65:2d:0e:a9:82:e3:b4:34:23:40:0e:30:50:97:f0:48:35:86:eb
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate testing-bfmtv-edito.cleo.media
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for testing-bfmtv-edito.cleo.media
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
testing-bfmtv-edito.cleo.media
testing-bfmtv-api.cleo.media
testing-bfmtv-api.cleo.media
Other certificates including the domain name cleo.media
(limited to 100 certificates)
unit-test-sandbox.cleo.media
unit-test.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
unit-test-sandbox.cleo.media
testing-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
staging-bfmtv-edito.cleo.media
cleo.media
testing-bfmtv-admin.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testtoto.cleo.media
staging-bfmtv-edito.cleo.media
www.cleo.media
staging-bfmtv-edito.cleo.media
cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
*.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
bfmtv.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
*.cleo.media
redirect.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
unit-test-sandbox.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-images.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-admin.cleo.media
staging-sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-sfractus-admin.cleo.media
unit-test-sandbox.cleo.media
testing-sfractus-admin.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-admin.cleo.media
testing-bfmtv-edito.cleo.media
sandbox.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
testing-bfmtv-edito.cleo.media
www.cleo.media
sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-cleo-bfmtv-brightcove.cleo.media
cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
unit-test.cleo.media
testing-sfractus-admin.cleo.media
unit-test.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
unit-test.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
unit-test-sandbox.cleo.media
testing-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
staging-bfmtv-edito.cleo.media
cleo.media
testing-bfmtv-admin.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testtoto.cleo.media
staging-bfmtv-edito.cleo.media
www.cleo.media
staging-bfmtv-edito.cleo.media
cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
*.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
bfmtv.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
*.cleo.media
redirect.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
unit-test-sandbox.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-images.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-admin.cleo.media
staging-sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-sfractus-admin.cleo.media
unit-test-sandbox.cleo.media
testing-sfractus-admin.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-admin.cleo.media
testing-bfmtv-edito.cleo.media
sandbox.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
testing-bfmtv-edito.cleo.media
www.cleo.media
sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-cleo-bfmtv-brightcove.cleo.media
cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
unit-test.cleo.media
testing-sfractus-admin.cleo.media
unit-test.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
Certificate
The complete raw certificate details for testing-bfmtv-edito.cleo.media in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEsDCCA5igAwIBAgIQC38IXOavBRQ6p+lZSS/IUjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA5MzAwMDAwMDBaFw0yMDEwMzAx MjAwMDBaMCkxJzAlBgNVBAMTHnRlc3RpbmctYmZtdHYtZWRpdG8uY2xlby5tZWRp YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK+r/nlcFheX6rEhbwKn FJxgbSFL2XixVs7u44y7buxxio0vbf+MbDOGE2wQuNrcBucljc8QWf0C3Jp6L16m yX2YJdOcAfaSvLd+BA1ZiSTBQ4478o4p82Zc1/UfnKJhk6c+2Agbr3iZuMSdPEo4 2w7MD/L8XcGHMp4GW1SxLqoNDNvwwHfzGDwBrwvl+WLFj/r7iKXk+htixXmQHefj VlAIJRoLectNYZbbNNBrju09qm8TLKI1AT6A2BQ3YH2IlkxOtePvIyIUDMdeZgBw d1xiJv9RSJ948B8IG26jfIDKHK301s/niihCFOIDuYsjmYs+S1/iF/Chklc4qKX4 If0CAwEAAaOCAbUwggGxMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q MB0GA1UdDgQWBBSotrpovdxjVUsdXo1lVqqz5EqiojBHBgNVHREEQDA+gh50ZXN0 aW5nLWJmbXR2LWVkaXRvLmNsZW8ubWVkaWGCHHRlc3RpbmctYmZtdHYtYXBpLmNs ZW8ubWVkaWEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6uFia0SsHOGwVX7 foibPD7zHPTPjqJyWdN/T/TfRzEHTgtY+LvWt6fpyFBygb9LPMNXcsjqFMo1tCAy UvvMzIm7qnyf1cPeD/QjeZ+1L7VXy+XSYFOG1SNS7KRx30+AXJoV69mC5JSbFXU7 WHBDI0TAqgE21gMry2w4lXAMG9qNURreVa3pXTLkYD8kmlcYvQ7rYBu6om0fpebb 5j3VhE1uFJT3senkAGPfbMPkRkZn8ak4/9NYkHqMNL3d3gsvNwuNhWMSQf9+o2C8 m7M5xTC45wRv1avUZA47B4Fv3IMfWgEdCxpvzIyUJ+0mu/mv+Ha5/vTkyKG4qY1C U3GuHw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6v+eVwWF5fqsSFvAqcU nGBtIUvZeLFWzu7jjLtu7HGKjS9t/4xsM4YTbBC42twG5yWNzxBZ/QLcmnovXqbJ fZgl05wB9pK8t34EDVmJJMFDjjvyjinzZlzX9R+comGTpz7YCBuveJm4xJ08Sjjb DswP8vxdwYcyngZbVLEuqg0M2/DAd/MYPAGvC+X5YsWP+vuIpeT6G2LFeZAd5+NW UAglGgt5y01hlts00GuO7T2qbxMsojUBPoDYFDdgfYiWTE614+8jIhQMx15mAHB3 XGIm/1FIn3jwHwgbbqN8gMocrfTWz+eKKEIU4gO5iyOZiz5LX+IX8KGSVziopfgh /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15281099274328916498783525960638515282 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testing-bfmtv-edito.cleo.media' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22176516790879717517432564926824398376661620982506976681047778841759789761778904195653922324462003683312070775670695405319371375686903354651054314980086782105650776196033528135364909979544490657489110885074504395458122161223995336937644623864648573470681423203700667690731526558172951599317515644588984833968512166028354779177437683025089960759668950501215611532206673343360398689892433124256226505605427190822052966417402850772305995354804177321754755140127712272929250428396904423550383050746899877435285408081689870038118347488475039753908916856468341121465524538894847655522713667569614222729706314437586922775037 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a8b6ba68bddc63554b1d5e8d6556aab3e44aa2a2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing-bfmtv-edito.cleo.media' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing-bfmtv-api.cleo.media' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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